Study sets
English

AWS Certified Cloud Practitioner (CLF-C02) | Domain 2 Shared Responsibility and IAM Questions 01

1 / 100.0s

Problem 1 ・ Question 1 / 10

Under the AWS shared responsibility model, which is AWS's responsibility?

View explanation

AWS is responsible for the security of the cloud itself — the facilities, hardware and so on that underpin it.

Problem 1 ・ Question 2 / 10

When using Amazon EC2, which is the customer's responsibility?

View explanation

With EC2 the customer manages the guest OS, the applications and the configuration.

Problem 1 ・ Question 3 / 10

When using Amazon S3, what must the customer configure?

View explanation

The customer is responsible for the data stored and for access settings such as the bucket policy.

Problem 1 ・ Question 4 / 10

Which is the most appropriate way to protect the root user of an AWS account?

View explanation

The root user has powerful permissions, so protect it with MFA and do not use it for ordinary work.

Problem 1 ・ Question 5 / 10

How is the principle of least privilege achieved in IAM?

View explanation

Allow explicitly only the operations needed and avoid excessive permissions.

Problem 1 ・ Question 6 / 10

How should an application on EC2 be given permissions for AWS services safely?

View explanation

An IAM role supplies temporary credentials and avoids embedding fixed keys.

Problem 1 ・ Question 7 / 10

Which service manages employee access to several AWS accounts and business applications in one place?

View explanation

IAM Identity Center manages workforce access centrally.

Problem 1 ・ Question 8 / 10

Which service creates and manages the encryption keys used to encrypt data?

View explanation

AWS KMS supports the creation of encryption keys and the control and auditing of their use.

Problem 1 ・ Question 9 / 10

Which service stores secrets such as database credentials and supports rotating them automatically?

View explanation

Secrets Manager supports storing, retrieving and rotating secrets securely.

Problem 1 ・ Question 10 / 10

Which AWS service issues temporary security credentials?

View explanation

AWS STS issues time-limited credentials for use with IAM roles and the like.